Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

CVE Database V5

GCVE Database

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability, which was classified as problematic, was found in swftools up to 0.9.2. This affects the function wav_convert2mono in the library lib/wav.c of the component wav2swf. The manipulation leads to out-of-bounds read. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

CVE-2025-6271 is a medium-severity vulnerability identified in swftools versions up to 0.9.2, specifically within the wav_convert2mono function of the wav2swf component, located in the lib/wav.c source file. The flaw manifests as an out-of-bounds read, which occurs when the function improperly accesses memory beyond the allocated buffer while converting WAV audio data to mono format. This vulnerability requires local access with low privileges (local attack vector with low privileges) and does not require user interaction or authentication. The CVSS 4.0 base score is 4.8, reflecting a moderate risk primarily due to the limited attack vector and the nature of the impact. The out-of-bounds read could potentially lead to information disclosure or cause application instability, such as crashes or denial of service, but does not directly allow code execution or privilege escalation. The vulnerability has been publicly disclosed, and proof-of-concept exploits may be available, although no known exploits in the wild have been reported to date. Since swftools is a command-line utility suite used for manipulating SWF (Flash) files, including conversion of audio formats, this vulnerability is relevant in environments where swftools is installed and used, particularly in legacy multimedia processing workflows or automated pipelines involving SWF content. The local attack requirement limits remote exploitation, implying that an attacker must already have some level of access to the affected system to trigger the vulnerability.

Detailed information about CVE-2025-6271: Out-of-Bounds Read in swftools affecting null swftools. Get real-time updates, technical details, and mitigation strat

CVE-2025-6271: Out-of-Bounds Read in swftools - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-6271: Out-of-Bounds Read in swftools

Threats Tagged 'cve-2025-6271'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-6271'

Lead Pen Test Professional